Tackling Ephemeral Phishing Websites: Google Chrome’s Enhanced Safe Browsing

Did you know an astonishing 60% of phishing websites have a fleeting lifespan of only about 10 minutes?

This startling statistic highlights the rapid evolution of cyber threats and underscores the urgency of staying vigilant.

Phishing sites, designed to deceive you into revealing your login credentials or downloading malware, are a prime example of this. Cybercriminals drive substantial traffic to these fraudulent sites, scam as many individuals as possible, and then swiftly dismantle the site to evade detection.

Wouldn’t it be advantageous to identify these threats before they disappear and re-emerge elsewhere? Google Chrome offers a solution to do just that.

(Acantha caveat – for business we recommend only MS Edge for Business now and we have many other check methods in place to capture a compromise like this, but for those who use Chrome, read on…)

Picture this scenario: You’re managing your business, constantly on the go, making quick decisions. You inadvertently land on a website that seems slightly off. But there’s no cause for alarm. You’re using Google Chrome, which checks the websites you visit against its database of known malicious URLs.

However, there’s a catch. Google’s list of dangerous websites is only updated every 30 to 60 minutes. This delay means that 60% of phishing domains active for just 10 minutes could potentially go undetected.

Here’s where Google Chrome’s Enhanced Safe Browsing comes into play.

With a recent update, Chrome has activated this feature for all users. It now verifies URLs in real-time against a dynamically updated list of malicious domains. Think of it as a digital bodyguard, identifying and addressing threats instantaneously.

Google has confirmed that Enhanced Safe Browsing will continue to offer comprehensive features, including deep file scans and protection against harmful extensions.

So, does this mean Google will have access to every URL you visit?

Indeed, it does. While this feature involves sharing all visited URLs with Google, the company asserts that this data won’t be utilised for other purposes, such as advertising. It presents a balancing act between security and privacy. Given the escalating sophistication of cyber threats, isn’t an additional layer of protection a prudent choice?

Our advice is to embrace these new tools and stay a step ahead of cybercriminals. The security of our businesses hinges on proactive measures like these.

If you require further assistance in safeguarding your business from phishing scams or any other cyber threats, please reach out to us.